@somewhere-cloud/sdk 0.0.0-stage → 0.13.1

package/dist/types/query-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-cache.d.ts","sourceRoot":"","sources":["../../src/query-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAoBD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,IAAI,GAAE,YAAiB,EAAE,GAAG,GAAE,MAAM,MAAiB;IAKjE;;;;OAIG;IACG,IAAI,CACR,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EACnC,KAAK,UAAQ,GACZ,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IA+B3B;;;OAGG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI;IAMhE;;;OAGG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAU/B,sDAAsD;IACtD,KAAK,IAAI,IAAI;CAOd"}

package/dist/types/resources/auth.d.ts

@@ -0,0 +1,188 @@
+import type { Client } from '../client.js';
+import type { AuthChangeEvent, AuthResponse, AuthSubscription, Result, Session, User } from '../types.js';
+export declare class AuthClient {
+    private readonly client;
+    private currentSession;
+    /**
+     * Cookie mode's only client-side state: the last-known user object.
+     * NOT a credential — the session itself lives in httpOnly cookies the
+     * page can't read. Cached (localStorage when available) so a reload
+     * paints the signed-in UI immediately; `/me` validates in the background.
+     */
+    private cookieUser;
+    private readonly authListeners;
+    constructor(client: Client);
+    /**
+     * Cookie transport applies only while no header session is held — an
+     * adopted token session (setSession / a tokens-returning backend) keeps
+     * header transport untouched for its lifetime.
+     */
+    private get cookieMode();
+    /** The synthetic Session a cookie session presents: user, no readable tokens. */
+    private cookieSession;
+    private setCookieUser;
+    /**
+     * Subscribe to sign-in / sign-out / token-refresh / user-update events.
+     * The callback fires immediately with
+     * `('INITIAL_SESSION', currentSession)` (asynchronously), then on every
+     * later transition.
+     *
+     *     const { data: { subscription } } =
+     *       sw.auth.onAuthStateChange((event, session) => { ... })
+     *     // later: subscription.unsubscribe()
+     */
+    onAuthStateChange(callback: (event: AuthChangeEvent, session: Session | null) => void): AuthSubscription;
+    private emit;
+    signUp(credentials: {
+        email: string;
+        password: string;
+    }): Promise<Result<AuthResponse>>;
+    signInWithPassword(credentials: {
+        email: string;
+        password: string;
+    }): Promise<Result<AuthResponse>>;
+    /** Auth-subpath-compatible alias. Result semantics stay SDK-shaped. */
+    signIn(credentials: {
+        email: string;
+        password: string;
+    }): Promise<Result<AuthResponse>>;
+    /** Send a passwordless magic-link/OTP email through the shared auth contract. */
+    sendMagicLink(input: {
+        email: string;
+        redirectUri?: string;
+    }): Promise<Result<{
+        sent: true;
+    }>>;
+    /** Complete passwordless sign-in; distinct from the legacy password-reset verifyOtp alias. */
+    verifyMagicLink(input: {
+        token: string;
+    }): Promise<Result<AuthResponse>>;
+    /**
+     * Returns a Google OAuth redirect URL from `signInWithOAuth`. The platform
+     * currently supports Google. The caller redirects the browser to `data.url`.
+     */
+    signInWithOAuth(options: {
+        provider: 'google';
+        redirectTo?: string;
+    }): Promise<Result<{
+        provider: 'google';
+        url: string;
+    }>>;
+    /** Finish the current sign-in; pending credentials remain private to this instance. */
+    completeMfa(input: {
+        code: string;
+    }): Promise<Result<AuthResponse>>;
+    signOut(): Promise<Result<null>>;
+    private performSignOut;
+    /**
+     * Returns the current session held in SDK memory — never makes an HTTP
+     * call. In cookie mode the session is the httpOnly cookie the browser
+     * owns: the returned Session has `cookie_session: true`, the cached user,
+     * and deliberately NO readable tokens. Call `getUser()` to validate it
+     * against the server.
+     */
+    getSession(): Promise<Result<{
+        session: Session | null;
+    }>>;
+    /** Fetch the current user — `GET /v1/auth/me` (header mode) or the app's own `/me` route (cookie mode). */
+    getUser(): Promise<Result<{
+        user: User | null;
+    }>>;
+    /**
+     * Restore a session the caller stored themselves (e.g. in localStorage).
+     * This flips the SDK's auth header to the supplied `access_token` so
+     * subsequent calls run as that user.
+     */
+    setSession(session: {
+        access_token: string;
+        session_token?: string;
+    }): Promise<Result<{
+        session: Session | null;
+    }>>;
+    /** Patch the currently-signed-in user's profile (display name, metadata). */
+    updateUser(attrs: {
+        display_name?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<Result<{
+        user: User | null;
+    }>>;
+    /**
+     * Exchange a refresh token for a fresh `(access_token, refresh_token)` pair.
+     * Refresh tokens rotate — the old one is invalidated. Run this from your
+     * server, not browser code (the developer key is required).
+     */
+    refreshSession(refreshToken?: string): Promise<Result<{
+        session: Session | null;
+    }>>;
+    /**
+     * Change the password for the currently signed-in user. Pass
+     * `currentPassword` unless the user has never set one (e.g. signed up
+     * via Google). On success the platform wipes every session and refresh
+     * token for the user — they will need to log in again everywhere.
+     */
+    updatePassword(params: {
+        newPassword: string;
+        currentPassword?: string;
+    }): Promise<Result<{
+        updated: true;
+    }>>;
+    /** Send the logged-in user a 6-digit email verification code. */
+    resendVerification(): Promise<Result<{
+        sent: true;
+    }>>;
+    /** Verify the 6-digit code that was emailed to the user. */
+    verifyEmail(code: string): Promise<Result<{
+        verified: true;
+    }>>;
+    /**
+     * Permanently delete the currently signed-in user. Wipes app_users
+     * row + sessions + refresh tokens + pending resets/verifications.
+     * App-level data your project stored about them is NOT touched —
+     * call your own cleanup before this.
+     */
+    deleteAccount(): Promise<Result<{
+        deleted: true;
+    }>>;
+    /** Trigger a password-reset email. */
+    resetPasswordForEmail(email: string): Promise<Result<{
+        sent: true;
+    }>>;
+    /** Complete a password reset using the token from the email. */
+    verifyPasswordReset(params: {
+        token: string;
+        newPassword: string;
+    }): Promise<Result<{
+        reset: true;
+    }>>;
+    /**
+     * @deprecated This historical name verifies a password-reset token, not a
+     * magic-link/OTP sign-in. Use `verifyPasswordReset`; use `verifyMagicLink`
+     * for passwordless sign-in. Kept unchanged under rule 9.
+     */
+    verifyOtp(params: {
+        token: string;
+        newPassword: string;
+    }): Promise<Result<{
+        reset: true;
+    }>>;
+    private sessionMutation;
+    /**
+     * Cookie-mode sign-in/up: POST to the app's own backend route (same
+     * origin), which calls `sw.auth.loginWithCookie` / `signupWithCookie`
+     * server-side and sets the httpOnly pair on the response. Never throws —
+     * expected failures (wrong password, duplicate email) come back as a
+     * `Result` error with the server's real code + message.
+     */
+    private runCookieSessionFlow;
+    /** Cookie-mode action that does not itself establish a session. */
+    private runCookieAction;
+    /**
+     * The platform's user-profile endpoints authenticate with a Bearer JWT the
+     * cookie client deliberately doesn't have (the session is an httpOnly
+     * cookie scoped to YOUR app's backend, not the platform API). Teach the
+     * fix instead of failing with a misleading "sign in first".
+     */
+    private cookieModeNeedsBackend;
+    private runAuthFlow;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/types/resources/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/resources/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EACV,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,MAAM,EACN,OAAO,EACP,IAAI,EACL,MAAM,aAAa,CAAC;AAiErB,qBAAa,UAAU;IAaT,OAAO,CAAC,QAAQ,CAAC,MAAM;IAZnC,OAAO,CAAC,cAAc,CAAwB;IAC9C;;;;;OAKG;IACH,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAE1B;gBAEyB,MAAM,EAAE,MAAM;IAK3C;;;;OAIG;IACH,OAAO,KAAK,UAAU,GAErB;IAED,iFAAiF;IACjF,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,aAAa;IAcrB;;;;;;;;;OASG;IACH,iBAAiB,CACf,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,KAAK,IAAI,GAClE,gBAAgB;IAuBnB,OAAO,CAAC,IAAI;IAaN,MAAM,CAAC,WAAW,EAAE;QACxB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAM3B,kBAAkB,CAAC,WAAW,EAAE;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAMjC,uEAAuE;IACjE,MAAM,CAAC,WAAW,EAAE;QACxB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAIjC,iFAAiF;IAC3E,aAAa,CAAC,KAAK,EAAE;QACzB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IA0BnC,8FAA8F;IACxF,eAAe,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAM9E;;;OAGG;IACG,eAAe,CAAC,OAAO,EAAE;QAC7B,QAAQ,EAAE,QAAQ,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,QAAQ,EAAE,QAAQ,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IA8BxD,uFAAuF;IACvF,WAAW,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAQnE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAiBlB,cAAc;IA0B5B;;;;;;OAMG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAOhE,2GAA2G;IACrG,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAoDvD;;;;OAIG;IACG,UAAU,CAAC,OAAO,EAAE;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IA6BhD,6EAA6E;IACvE,UAAU,CAAC,KAAK,EAAE;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAqB1C;;;;OAIG;IACG,cAAc,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAyDzF;;;;;OAKG;IACG,cAAc,CAAC,MAAM,EAAE;QAC3B,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAmBtC,iEAAiE;IAC3D,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAc3D,4DAA4D;IACtD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAcpE;;;;;OAKG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAiBzD,sCAAsC;IAChC,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAgB3E,gEAAgE;IAC1D,mBAAmB,CAAC,MAAM,EAAE;QAChC,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAoBpC;;;;OAIG;IACG,SAAS,CAAC,MAAM,EAAE;QACtB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAMpC,OAAO,CAAC,eAAe;IAgCvB;;;;;;OAMG;YACW,oBAAoB;IAoHlC,mEAAmE;YACrD,eAAe;IAiD7B;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;YAoBhB,WAAW;CAuD1B"}

package/dist/types/resources/calls.d.ts

@@ -0,0 +1,27 @@
+import type { Client } from '../client.js';
+import type { CallsSessionCreateRequest, CallsSessionCreateResponse, Result } from '../types.js';
+/**
+ * Real-time voice/video. A thin passthrough over a global WebRTC SFU —
+ * the platform mediates session creation (so the upstream secret stays
+ * server-side) and the SDP exchanges flow through unchanged.
+ *
+ *     const { data } = await sw.calls.createSession()
+ *     // → use data.session_id with `addTracks` / `renegotiate` /
+ *     //   `closeTracks`. SDP bodies are opaque — pass through whatever
+ *     //   the WebRTC layer hands you.
+ *
+ * Sessions are not persisted by the platform — the developer holds the
+ * `session_id` client-side (typical WebRTC UX).
+ */
+export declare class CallsClient {
+    private readonly client;
+    constructor(client: Client);
+    createSession(input?: CallsSessionCreateRequest): Promise<Result<CallsSessionCreateResponse>>;
+    /** Add new published or subscribed tracks. SDP body passed through verbatim. */
+    addTracks(sessionId: string, body: Record<string, unknown>): Promise<Result<Record<string, unknown>>>;
+    /** Renegotiate the SDP for an existing session. */
+    renegotiate(sessionId: string, body: Record<string, unknown>): Promise<Result<Record<string, unknown>>>;
+    /** Close one or more tracks on a session. */
+    closeTracks(sessionId: string, body: Record<string, unknown>): Promise<Result<Record<string, unknown>>>;
+}
+//# sourceMappingURL=calls.d.ts.map

package/dist/types/resources/calls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calls.d.ts","sourceRoot":"","sources":["../../../src/resources/calls.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,MAAM,EACP,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;GAYG;AACH,qBAAa,WAAW;IACV,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,aAAa,CAAC,KAAK,GAAE,yBAA8B,GAAG,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAQvG,gFAAgF;IAC1E,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAQ3G,mDAAmD;IAC7C,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAQ7G,6CAA6C;IACvC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAO9G"}

package/dist/types/resources/chat.d.ts

@@ -0,0 +1,24 @@
+import type { Client } from '../client.js';
+import type { ChatCompletion, ChatCompletionRequest } from '../types.js';
+/**
+ * OpenAI-style `chat.completions.create(...)`. Unlike every other
+ * surface on the Somewhere SDK, this one THROWS on error instead of
+ * returning a `{data, error}` envelope — matching the behaviour of the
+ * official OpenAI Node client exactly.
+ *
+ *     const completion = await sw.chat.completions.create({
+ *       model: 'gpt-5.4',
+ *       messages: [{ role: 'user', content: 'Hello' }],
+ *     })
+ *     const text = completion.choices[0].message.content
+ */
+export declare class ChatClient {
+    readonly completions: ChatCompletionsClient;
+    constructor(client: Client);
+}
+export declare class ChatCompletionsClient {
+    private readonly client;
+    constructor(client: Client);
+    create(request: ChatCompletionRequest): Promise<ChatCompletion>;
+}
+//# sourceMappingURL=chat.d.ts.map

package/dist/types/resources/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../../src/resources/chat.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzE;;;;;;;;;;;GAWG;AACH,qBAAa,UAAU;IACrB,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;gBAChC,MAAM,EAAE,MAAM;CAG3B;AAED,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;CAmBtE"}

package/dist/types/resources/db.d.ts

@@ -0,0 +1,81 @@
+import type { Client } from '../client.js';
+import type { Result } from '../types.js';
+import { SomewhereQueryBuilder } from './postgrest.js';
+/**
+ * Database namespace with raw SQL plus the fluent
+ * query builder under one roof.
+ *
+ *     // Raw SQL — parameterized with $1, $2…
+ *     const rows = await sw.db.query(
+ *       'SELECT * FROM posts WHERE author_id = $1',
+ *       [authorId],
+ *     );
+ *
+ *     // DDL / migrations — developer key required
+ *     await sw.db.migrate(`
+ *       CREATE TABLE IF NOT EXISTS posts (
+ *         id INTEGER PRIMARY KEY,
+ *         title TEXT NOT NULL
+ *       )
+ *     `);
+ *
+ *     // Fluent query builder (alias of sw.from)
+ *     const { data } = await sw.db.from('posts').select('*').eq('id', 1);
+ */
+export declare class DbClient {
+    private readonly client;
+    constructor(client: Client);
+    /**
+     * Run a raw SQL query. Postgres-style `$1` placeholders are normalized
+     * to positional binds. Returns the rows array on success and throws a
+     * `SomewhereError` on failure (use `try/catch`, not `{data, error}`).
+     *
+     * Requires a server-side `smt_` developer key. App-user/browser callers
+     * should invoke a server function and use its runtime `sw.db` binding.
+     * The SDK deliberately returns only canonical result `data`; runtime and
+     * REST result metadata (`count`, `changes`, `last_row_id`) is not returned.
+     */
+    query<Row = Record<string, unknown>>(sql: string, params?: unknown[], options?: {
+        projectId?: string;
+        timeoutMs?: number;
+    }): Promise<Row[]>;
+    /**
+     * Run DDL (CREATE TABLE / ALTER / DROP / etc). Developer-only — the
+     * server rejects app-user JWTs on this route.
+     */
+    migrate(sql: string, options?: {
+        projectId?: string;
+    }): Promise<void>;
+    /**
+     * Fluent query builder. Identical to `sw.from(table)` — exposed
+     * here so devs who think in `sw.db.*` namespacing find it naturally.
+     */
+    from(table: string): SomewhereQueryBuilder;
+    /**
+     * List user tables in this project's database.
+     */
+    tables(options?: {
+        projectId?: string;
+    }): Promise<string[]>;
+    /**
+     * Inspect a single table's columns + indexes. Returns null if the
+     * table doesn't exist.
+     */
+    schema(table: string, options?: {
+        projectId?: string;
+    }): Promise<Record<string, unknown> | null>;
+    /**
+     * Run a batch of mutations as one atomic transaction. Statements
+     * execute in order; if any fails the whole batch rolls back.
+     */
+    batch(statements: Array<{
+        sql: string;
+        params?: unknown[];
+    }>, options?: {
+        projectId?: string;
+    }): Promise<Result<Array<{
+        rows: Record<string, unknown>[];
+        rows_affected: number;
+    }>>>;
+}
+//# sourceMappingURL=db.d.ts.map

package/dist/types/resources/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../../src/resources/db.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,QAAQ;IACP,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C;;;;;;;;;OASG;IACG,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,OAAO,EAAO,EACtB,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACvD,OAAO,CAAC,GAAG,EAAE,CAAC;IAuBjB;;;OAGG;IACG,OAAO,CACX,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,IAAI,CAAC;IAQhB;;;OAGG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB;IAI1C;;OAEG;IACG,MAAM,CAAC,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IASrE;;;OAGG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAc1C;;;OAGG;IACG,KAAK,CACT,UAAU,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,EACtD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CAgBtF"}

package/dist/types/resources/emails.d.ts

@@ -0,0 +1,20 @@
+import type { Client } from '../client.js';
+import type { Result, SendEmailRequest, SendEmailResponse } from '../types.js';
+/**
+ * Resend-style email client. Matches `resend.emails.send({...})` exactly,
+ * including the `{ from, to, subject, html, text, reply_to, cc, bcc }`
+ * body shape and the `{ data, error }` return envelope.
+ *
+ *     const { data, error } = await sw.emails.send({
+ *       from: 'noreply@myapp.com',
+ *       to: 'user@example.com',
+ *       subject: 'Welcome!',
+ *       html: '<h1>Welcome</h1>',
+ *     })
+ */
+export declare class EmailsClient {
+    private readonly client;
+    constructor(client: Client);
+    send(input: SendEmailRequest): Promise<Result<SendEmailResponse>>;
+}
+//# sourceMappingURL=emails.d.ts.map

package/dist/types/resources/emails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emails.d.ts","sourceRoot":"","sources":["../../../src/resources/emails.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE/E;;;;;;;;;;;GAWG;AACH,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,IAAI,CACR,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;CAiBtC"}

package/dist/types/resources/fs.d.ts

@@ -0,0 +1,68 @@
+import type { Client } from '../client.js';
+import type { Result, StorageDownloadResult } from '../types.js';
+/**
+ * Raw filesystem namespace. Path-based read / write / list / delete
+ * without the bucket abstraction. Use this when you're
+ * thinking in absolute paths inside your project (`/assets/logo.png`,
+ * `/data/users.json`).
+ *
+ *     await sw.fs.write('avatar.png', bytes, { contentType: 'image/png' });
+ *     const file = await sw.fs.read('avatar.png');
+ *     const entries = await sw.fs.list('/');
+ *     await sw.fs.delete('avatar.png');
+ *
+ * For the prefix-oriented API see `sw.storage.from(bucket)`.
+ */
+export declare class FsClient {
+    private readonly client;
+    constructor(client: Client);
+    /**
+     * Write a file. Body can be a string, ArrayBuffer, Blob, ReadableStream,
+     * or anything fetch accepts as a BodyInit. Path is stored verbatim
+     * (no bucket prefix prepended).
+     */
+    write(path: string, body: BodyInit, options?: {
+        contentType?: string;
+        projectId?: string;
+    }): Promise<Result<{
+        path: string;
+        size_bytes?: number;
+        content_type?: string;
+    }>>;
+    /**
+     * Read a file. Returns `{ body: ArrayBuffer, contentType, size }`.
+     * Use `new TextDecoder().decode(result.data.body)` to get a string.
+     */
+    read(path: string, options?: {
+        projectId?: string;
+    }): Promise<Result<StorageDownloadResult>>;
+    /**
+     * List entries under a directory path. Returns an array of `{ name,
+     * size, content_type?, updated_at? }` objects.
+     */
+    list(prefix?: string, options?: {
+        projectId?: string;
+    }): Promise<Result<Array<{
+        name: string;
+        size: number;
+        content_type?: string;
+        updated_at?: string;
+    }>>>;
+    /**
+     * Delete a single file. To delete many in one call use
+     * `sw.storage.from(bucket).remove([...])`.
+     */
+    delete(path: string, options?: {
+        projectId?: string;
+    }): Promise<Result<{
+        deleted: true;
+    }>>;
+    /**
+     * Public URL for a file. Only resolves if the file was marked public.
+     * Does not perform a HEAD — the URL is constructed locally.
+     */
+    publicUrl(path: string, options?: {
+        projectId?: string;
+    }): string;
+}
+//# sourceMappingURL=fs.d.ts.map

package/dist/types/resources/fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../../src/resources/fs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IACP,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C;;;;OAIG;IACG,KAAK,CACT,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,OAAO,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACzD,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IA2BhF;;;OAGG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAazC;;;OAGG;IACG,IAAI,CACR,MAAM,SAAK,EACX,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CACR,MAAM,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAC1F;IAgCD;;;OAGG;IACG,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAWrC;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,MAAM;CAKtE"}

package/dist/types/resources/functions.d.ts

@@ -0,0 +1,30 @@
+import type { Client } from '../client.js';
+import type { FunctionInvokeOptions, Result } from '../types.js';
+/**
+ * Application-function invocation client.
+ *
+ *     const { data, error } = await sw.functions.invoke('checkout', {
+ *       body: { plan: 'pro' },
+ *     })
+ *
+ * `invoke(name)` calls `POST {projectUrl}/api/{name}` — the project's own
+ * deployed function (an `api/{name}` file). `data` is the function's parsed
+ * JSON response (or text); `error` is set on any non-2xx status or network
+ * failure, using the established `{ data, error }` envelope.
+ *
+ * The function host is the app URL you passed to `createClient(appUrl, key)`
+ * or as `functionsUrl`. It is never derived from `projectId`: a project id
+ * can be a slug that is unique only to its owner, and the same text can be
+ * another customer's subdomain, so a derived host could receive your
+ * credentials. Without an app URL `invoke` returns `NO_FUNCTION_HOST` before
+ * any request. In a project folder the CLI records the platform-reported URL
+ * as `app_url` in `.somewhere.json`, and `somewhere status --json` prints it.
+ */
+export declare class FunctionsClient {
+    private readonly client;
+    constructor(client: Client);
+    invoke<T = unknown>(name: string, options?: FunctionInvokeOptions): Promise<Result<T>>;
+    /** The caller-supplied app URL, or null. Never derived from projectId. */
+    private resolveBase;
+}
+//# sourceMappingURL=functions.d.ts.map

package/dist/types/resources/functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.d.ts","sourceRoot":"","sources":["../../../src/resources/functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,MAAM,CAAC,CAAC,GAAG,OAAO,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAkGrB,0EAA0E;IAC1E,OAAO,CAAC,WAAW;CAGpB"}

package/dist/types/resources/inbox.d.ts

@@ -0,0 +1,52 @@
+import type { Client } from '../client.js';
+import type { InboxAddress, InboxAddressCreateRequest, InboxAddressListResponse, InboxListOptions, InboxMessageDetail, InboxMessageListResponse, Result } from '../types.js';
+/**
+ * Inbound email — the receive side of `sw.emails.send(...)`.
+ * Each project can mint addresses on the platform's inbox subdomain,
+ * and incoming mail is persisted with subject + text preview + raw MIME.
+ *
+ *     // Create an inbox address (e.g. orders@inbox.somewhere.tech).
+ *     await sw.inbox.addresses.create({ local: 'orders', label: 'Orders' })
+ *
+ *     // List recent messages.
+ *     const { data } = await sw.inbox.messages.list({ limit: 20 })
+ *
+ *     // Fetch the full message + a path for the raw .eml.
+ *     const msg = await sw.inbox.messages.get('msg-id')
+ *
+ *     // Raw MIME bytes (forwarding, archival, parsing).
+ *     const raw = await sw.inbox.messages.getRaw('msg-id')
+ */
+export declare class InboxAddressesClient {
+    private readonly client;
+    constructor(client: Client);
+    create(input: InboxAddressCreateRequest): Promise<Result<InboxAddress>>;
+    list(opts?: {
+        projectId?: string;
+    }): Promise<Result<InboxAddressListResponse>>;
+    delete(id: string): Promise<Result<{
+        id: string;
+        deleted: true;
+    }>>;
+}
+export declare class InboxMessagesClient {
+    private readonly client;
+    constructor(client: Client);
+    list(opts?: InboxListOptions): Promise<Result<InboxMessageListResponse>>;
+    get(id: string): Promise<Result<InboxMessageDetail>>;
+    /** Raw MIME bytes (`.eml`) and content type. */
+    getRaw(id: string): Promise<{
+        body: ArrayBuffer;
+        contentType: string;
+    }>;
+    delete(id: string): Promise<Result<{
+        id: string;
+        deleted: true;
+    }>>;
+}
+export declare class InboxClient {
+    readonly addresses: InboxAddressesClient;
+    readonly messages: InboxMessagesClient;
+    constructor(client: Client);
+}
+//# sourceMappingURL=inbox.d.ts.map

package/dist/types/resources/inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../../../src/resources/inbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EACV,YAAY,EACZ,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,MAAM,EACP,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,MAAM,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAQvE,IAAI,CAAC,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAQlF,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;CAOzE;AAED,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,IAAI,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAQ5E,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAM1D,gDAAgD;IAC1C,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAIvE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;CAOzE;AAED,qBAAa,WAAW;IACtB,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;gBAE3B,MAAM,EAAE,MAAM;CAI3B"}

package/dist/types/resources/payments.d.ts

@@ -0,0 +1,31 @@
+import type { Client } from '../client.js';
+import type { PaymentsCheckoutRequest, PaymentsCheckoutResponse, PaymentsDashboardLinkResponse, PaymentsOnboardRequest, PaymentsOnboardResponse, PaymentsStatusOptions, PaymentsStatusResponse, Result } from '../types.js';
+/**
+ * Stripe-Connect-style payments. The platform is the Stripe platform
+ * account; each project gets its own connected account. somewhere.tech
+ * takes zero platform fee — every charge settles 100% to the developer's
+ * connected account. The developer never holds a Stripe key — they call:
+ *
+ *     await sw.payments.onboard({ return_url, refresh_url })
+ *     // → redirect end-user to result.onboarding_url
+ *
+ *     const status = await sw.payments.status()
+ *     if (!status.data?.charges_enabled) ...
+ *
+ *     await sw.payments.checkout({
+ *       line_items: [{ amount: 4999, currency: 'usd', name: 'Pro' }],
+ *       success_url, cancel_url,
+ *     })
+ *     // → redirect end-user to result.url
+ */
+export declare class PaymentsClient {
+    private readonly client;
+    constructor(client: Client);
+    onboard(input?: PaymentsOnboardRequest): Promise<Result<PaymentsOnboardResponse>>;
+    status(opts?: PaymentsStatusOptions): Promise<Result<PaymentsStatusResponse>>;
+    checkout(input: PaymentsCheckoutRequest): Promise<Result<PaymentsCheckoutResponse>>;
+    dashboardLink(opts?: {
+        projectId?: string;
+    }): Promise<Result<PaymentsDashboardLinkResponse>>;
+}
+//# sourceMappingURL=payments.d.ts.map

package/dist/types/resources/payments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payments.d.ts","sourceRoot":"","sources":["../../../src/resources/payments.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,MAAM,EACP,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,OAAO,CAAC,KAAK,GAAE,sBAA2B,GAAG,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAYrF,MAAM,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAQjF,QAAQ,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAgBnF,aAAa,CAAC,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC;CAOvG"}